Browse Source

Fixed the unescaped redirect_uri causes the mismatch with the requested one. (#2766)

Signed-off-by: Yasuhiro ABE <yasu-abe@u-aizu.ac.jp>
pull/3733/head
Yasuhiro ABE 2 years ago
parent
commit
8259ff02c5
  1. 3
      server/oauth2.go

3
server/oauth2.go

@ -457,7 +457,8 @@ func (s *Server) parseAuthorizationRequest(r *http.Request) (*storage.AuthReques
return nil, newDisplayedErr(http.StatusBadRequest, "Failed to parse request.")
}
q := r.Form
redirectURI, err := url.QueryUnescape(q.Get("redirect_uri"))
redirectURI := q.Get("redirect_uri")
_, err := url.QueryUnescape(redirectURI)
if err != nil {
return nil, newDisplayedErr(http.StatusBadRequest, "No redirect_uri provided.")
}

Loading…
Cancel
Save